N’hésitez pas à venir nous dire bonjour sur le stand 👋

🐳 🐙 No Compose tips this week I'm at @devoxx.fr!

3 talks to catch me on stage:
🔐 Wed 17:50 - YOLO coding agents, safely
🐉 Thu 13:30 - Compose & Dragons (Tiny LLMs RPG)
🤖 Fri 11:35 - Compose for AI & Cloud

And at the Docker booth 😉

lours.me/posts/devoxx-france-2026/

#DevoxxFR #Docker

Don't let people tell you Linux will divide by two your possum performance. It's way more nuanced than that.

mydbanotebook.org/posts/postgr...

New post: Embedding a Web IDE + docker-agent into sbx 🛡️

- Code Server inside a secure sandbox #sbx
- @docker.com-agent 1.46.0 with local LLMs via Docker Model Runner
- Fully reproducible custom template

k33g.org/20260418-web...

#Docker #DevTools #LocalAI

Pour les curieux vous pouvez regarder docs.docker.com/ai/sandboxes
Il y aura aussi des démos à @devoxx.fr sur le stand @docker.com et @lours.me présentera un TiA à ce sujet m.devoxx.com/events/devox...

Release v1.46.0 · docker/docker-agent This release adds OAuth credential configuration for MCP servers, evaluation testing improvements, and numerous stability fixes. What's New Adds support for explicit OAuth credentials configuratio...

Docker Agent 1.46.0 is out and fully supports @anthropic.com Opus 4.7

github.com/docker/docke...

🐳 🐙 Docker Compose Tip #53

Control your project name!

name: myapp-${ENV:-dev}

Avoid conflicts, run multiple instances, keep things clean.

docker compose ls # See all projects

Guide: lours.me/posts/compose-tip-053-project-name-workdir/

#Docker #Compose #Configuration #DevOps

Building a Real App Inside a Docker Sandbox A step-by-step guide to building a real app inside a Docker Sandbox: from sbx create to network policies, port forwarding, and shipping. Safe and practical.

Thank you @mdelapenya.bsky.social for writing about what I've been working on the last few months mdelapenya.xyz/posts/2026-0...

🐳 🐙 Docker Compose Tip #52

Dedicated CI test env with Compose!
override file:
- Seeded database
- Test runner service
- Clean teardown with --volumes

docker compose -f compose.yml -f ci.yml up --exit-code-from tests

Guide: lours.me/posts/compose-tip-052-ci-test-environment/
#Docker #CICD #Testing

🐳 🐙 Docker Compose Tip #51

Stop using sleep in your CI scripts!

docker compose up --wait --wait-timeout 60

Blocks until all services are healthy.

Guide: lours.me/posts/compose-tip-051-up-wait/

#Docker #Compose #CICD #DevOps

🐳 🐙 Docker Compose Tip #50

GPU access in Compose!

deploy:
resources:
reservations:
devices:
- driver: nvidia
count: 1
capabilities: [gpu]

ML training, inference, video processing.

Guide: lours.me/posts/compose-tip-050-gpu-support/
#Docker #Compose #GPU #ML

GitHub - mikegcoleman/sbx-quickstart: A quickstart for Docker Sandboxes (sbx) A quickstart for Docker Sandboxes (sbx). Contribute to mikegcoleman/sbx-quickstart development by creating an account on GitHub.

My colleague @mikegcoleman.com wrote a ✨ great user guide for @docker.com SBX (Docker Sandboxes: run your AI agents with complete peace of mind). Read it and bookmark it!
github.com/mikegcoleman...

🐳 🐙 Docker Compose Tip #47

Sidecars with Compose-native features!

network_mode: service:app # Share network
volumes_from: app:ro # Share volumes

TLS proxy, log forwarding, pod-like patterns.

Guide: lours.me/posts/compose-tip-047-sidecar-patterns/

#Docker #Compose #Architecture #Patterns

🐙 Docker Compose Tip #46

Build args vs env vars: different times, different jobs!

build.args → build time only (ARG)
environment → runtime only (ENV)

Don't mix them up! And never put secrets in build args.

Guide: lours.me/posts/compose-tip-046-build-args-vs-env/

#Docker #Compose #Configuration

🐳 🐙 Docker Compose Tip #45

One Dockerfile, multiple targets!

build:
context: .
target: dev # or production

Different images for dev and prod from the same file.

Guide: lours.me/posts/compose-tip-045-multi-stage-target/

#Docker #Compose #Build #DevOps

Immutable tags Learn about immutable tags and how they help maintain image version consistency on Docker Hub.

Recently discovered that it was possible to have immutable docker image tag on DockerHub. It's great and going in the right direction

I am curious how many organizations enabled it

docs.docker.com/docker-hub/r...

I can't wait to see this coming on ghcr.io

🐳 🐙 Docker Compose Tip #44

Graceful shutdowns need the right signal!

```
stop_signal: SIGQUIT
stop_grace_period: 30s
init: true
```

Control what happens when you stop.

Guide: lours.me/posts/compose-tip-044-signal-handling/

#Docker #Compose #Runtime #Containers

sous la pression de son manager, il trébuche !

🐳 🐙 Docker Compose Tip #43

Harden containers in one line!

read_only: true
tmpfs:
- /tmp:size=50M

Immutable filesystem + writable only where needed.

Guide: lours.me/posts/compose-tip-043-read-only-rootfs/

#Docker #Compose #Security #Containers

🐳 🐙 Docker Compose Tip #42

Smart variable substitution!

${TAG:-latest} # default value
${TAG:?required} # fail if missing

Flexible configs with safety built in.

Guide: lours.me/posts/compose-tip-042-variable-substitution/

#Docker #Compose #Configuration #DevOps

Building Gordon: Docker's AI Agent A behind-the-scenes look at building Gordon - Docker's AI agent. From choosing docker-agent as the runtime, to analyzing user questions, designing the UX, setting up evals, and building the right tool...

Awesome post from Nuno that will take you through the journey of shipping Gordon, Docker’s AI assistant n9o.xyz/posts/202603...

🐳 🐙 Docker Compose Tip #40

Labels cost nothing but unlock a lot!

labels:
com.example.team: "backend"
com.example.env: "production"

Filter, organize, integrate with Traefik & Prometheus.

Guide: lours.me/posts/compose-tip-040-labels/

#Docker #Compose #Configuration #Monitoring

The biggest risk with agents isn’t the model. It’s what the agent can access at runtime.

NanoClaw now runs inside Docker Sandboxes, giving every agent MicroVM isolation - no host access, smaller blast radius.

Safe execution for real-world AI agents:
https://bit.ly/3PAIfcU
https://bit.ly/4s3f0xX

🐳 🐙 Docker Compose Tip #39

Combine all 3 for a clean setup!

include → reusable infra stacks
extends → DRY service config
Overrides → env differences

Each handles its own concern!

lours.me/posts/compose-tip-039-combining-include-extends-overrides/

#Docker #Configuration

🐳 🐙 Docker Compose Tip #38

Which one to use?

Adapting per environment? → Override files
Sharing base config across services? → extends
Importing a self-contained stack? → include

Simple decision guide inside!
Guide: lours.me/posts/compose-tip-038-when-to-use-which/

#Docker #Configuration #DevOps

Dealing with OS/Base images CVEs is quite easier I admit with @docker.com Docker Hardened Images 💪

Before:
FROM alpine:latest AS final

Damn, a new CVE in alpine:latest that is not fixed yet!
...
💡What if I replace it by the DHI alpine base image?

After:
FROM dhi.io/alpine-base:3.23 AS final

💪

🐳 🐙 Docker Compose Tip #37

3 ways to split Compose configs, each works differently!

Override files → project-level merge
extends → service-level inheritance
include → isolated sub-project import

Guide: lours.me/posts/compose-tip-037-include-extends-overrides/

#Docker #Configuration #Compose

GitHub - docker/docker-agent: Agent Builder and Runtime by Docker Engineering Agent Builder and Runtime by Docker Engineering. Contribute to docker/docker-agent development by creating an account on GitHub.

You like cagent? You'll love github.com/docker/docke...!

We renamed cagent to Docker Agent to show our commitment. Gordon, our AI assistant is 100% based on it and new shinny toys are in the making.

It's packaged with Docker Desktop 4.63.0.

Another advantage? Now you know how to pronounce it.

🐳 🐙 Docker Compose Tip #36

Custom DNS without touching /etc/hosts!

extra_hosts:
- "api.local:192.168.1.100"
- "host.docker:host-gateway"

Perfect for local development!

Learn: lours.me/posts/compose-tip-036-extra-hosts/

#Docker #Compose #Networking #DNS

🐳 🐙 Docker Compose Tip #35

⚡ RAM-speed storage with tmpfs!

tmpfs:
- /tmp:size=100M
- /app/cache:size=500M

Fast, secure, self-cleaning!

Guide: lours.me/posts/compose-tip-035-tmpfs-storage/

#Docker #Compose #Performance #Storage